CVE-2020-10878

Published: Jun 5, 2020Modified: Jun 17, 2026

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Exploitability: 3.9 / Impact: 4.7

Source: NVD

Description

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.

Affected (25)

Products: Perl: Perl · Fedoraproject: Fedora · Opensuse: Leap · +2 more

Show all products

1 product

1 product

1 product

2 products

Oncommand Workflow Automation

Snap Creator Framework

12 products

Communications Billing And Revenue Management

Communications Diameter Signaling Router

Communications Eagle Application Processor

Communications Eagle Lnp Application Processor

Communications Lsms

Communications Offline Mediation Controller

Communications Performance Intelligence Center

Communications Pricing Design Center

Configuration Manager

Enterprise Manager Base Platform

Tekelec Platform Distribution

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Perl Perl	Before 5.30.3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 31

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.1

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Netapp Oncommand Workflow Automation	All versions
Netapp Snap Creator Framework	All versions

Configuration E

20 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications Billing And Revenue Management	Version 12.0.0.2.0
Oracle Communications Billing And Revenue Management	Version 12.0.0.3.0
Oracle Communications Diameter Signaling Router	From 8.0.0 to 8.5.0
Oracle Communications Eagle Application Processor	From 16.1.0 to 16.4.0
Oracle Communications Eagle Lnp Application Processor	Version 10.1
Oracle Communications Eagle Lnp Application Processor	Version 10.2
Oracle Communications Eagle Lnp Application Processor	Version 46.7
Oracle Communications Eagle Lnp Application Processor	Version 46.8
Oracle Communications Eagle Lnp Application Processor	Version 46.9
Oracle Communications Lsms	From 13.1 to 13.4
Oracle Communications Offline Mediation Controller	Version 12.0.0.3.0
Oracle Communications Performance Intelligence Center	From 10.3.0.0.0 to 10.3.0.2.1
Oracle Communications Performance Intelligence Center	From 10.4.0.1.0 to 10.4.0.3.1
Oracle Communications Pricing Design Center	Version 12.0.0.3.0
Oracle Configuration Manager	Version 12.1.2.0.8
Oracle Enterprise Manager Base Platform	Version 13.4.0.0
Oracle Sd Wan Aware	Version 8.2
Oracle Sd Wan Aware	Version 9.0
Oracle Sd Wan Aware	Version 9.1
Oracle Tekelec Platform Distribution	From 7.4.0 to 7.7.1

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (30)

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod

Source: cve@mitre.org

Third Party Advisory

https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/perl/perl5/commit/0a320d753fe7fca03df259a4dfd8e641e51edaa8

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/perl/perl5/commit/3295b48defa0f8570114877b063fe546dd348b3c

Source: cve@mitre.org

PatchThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/

Source: cve@mitre.org

https://security.gentoo.org/glsa/202006-03

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200611-0001/

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com//security-alerts/cpujul2021.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuapr2022.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2021.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html

Source: cve@mitre.org

PatchThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/perl/perl5/commit/0a320d753fe7fca03df259a4dfd8e641e51edaa8

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/perl/perl5/commit/3295b48defa0f8570114877b063fe546dd348b3c

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202006-03

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200611-0001/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.oracle.com//security-alerts/cpujul2021.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuapr2022.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2021.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.